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Traditional Views of the CIO Roles 


Business Plan 4 


Functional Plan Business 
Management 


Productivity Plan 


aT earth 
Management 
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An Expansive View of DoD CIO Responsibilities 


Information Resources Management; 
Business Management Modernization; 
Network-Centric Policies; 

Command & Control; 
Communications and Space; 
Enterprise-wide Strategies; 
Information Assurance; 

Spectrum management; 

9. Network operations; 

10. Positioning, Navigation & Timing; 

11. Contingency and Migration; 

12. Records Management. 
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Sources of Authority 


1. Evaluates against approved metrics; 

Concurs with budget requests; 

Initiates continuation, modification or termination of 
programs; 

4. Assures compliance with standards & policies; 

5. Verifies compliance with Enterprise Architecture; 

6. Dictates data & information management methods; 
7. Ensures enforcement of policies and standards; 
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. Serves as Milestone Decision Authority of Major Systems; 
Has direct authority over the Director of DISA; 


0.Provides policy guidance to the Director, NSA regarding 
network operations and Information Assurance; 


11.lssues DoD Instructions 
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Supplemental Functions Performed 


1. Inventory of essential information systems; 

2. Contingency plans in case of disruption in operations; 

3. Internet and Web site administration oversight; 

4. Accountability for E-Gov for President's Mgmt. Agenda; 

5. Training & career development for DoD systems; 

6. Advice on implementation of Business systems; 

7. Statement of information-related R&D requirements; 

8. Criteria for Command & Control reliability and survivability; 
9. Compliance & reporting to OMB directives; 

10.Compliance with Federal Enterprise Architecture. 
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Prof. Stras: 


Organizational Matters 


Reports directly to SECDEF and DEPSECDEF; 
Chairman, DoD CIO Executive Board; 

Member, Intelligence Community ClO Council; 
Member, Federal ClO Council; 

Advisor to the Defense Acquisition Board and the 
Defense Space Acquisition Board; 

Represent the SECDEF on the NATO C3 Board; 
Coordinator with Department of Homeland Security 
for systems interoperability; 

Sponsor of C3l Federally Funded Research and 
Development Centers; 


Certification Authority for Business Management 
Modernization Process (BMMP). 
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Part I - IRM Management 


Information Resources Management 
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Directive 8000.1: Management of Information Resources (2002) 


¢ I.T. is only a part of Information Resources; 

¢ Enable full data and information interoperability; 

¢ Deliver integrated architecture; 

¢ Components will use DoD-wide applications; 

¢ Use shared networks, computers, databases, software reuse; 
¢ Require quantitative metrics to gauge progress; 

¢ Use consistent risk-adjusted returns for investments; 

¢ Assure goals alignment through verifiable measurements; 

¢ Benchmark functional processes vs. models of excellence; 
¢ Information Assurance defined during process engineering; 
¢ Work process improvements. 
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DoD FY 2006 L.T. Budget by Function 


Number of FY 2006 
Projects 
585 Warfighter $7,644,381| 25.4% [Teeth | 


1,891 Infrastructure, Enterprise Environment} $15,333,534] 51.0% 


Budget Category % Of total 


Budget - $000 


680 Installation, Environment, Logistics 


T-T Ratio: 25.4%/(100-25.4) = 34% 
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There Are Only Enterprise Solutions 


Information Marra Spending- eyoo9g —% of Total 
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Management of Systems Integration Major Challenge 


$ Billions FYO5 


FYO6 FYO7 
Overall DOD IT Spend $28.7 $29.9 $30.7 


% Contracted 73.5% 75.6% 78.5% 
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50% of I.T. Projects <£2 Million 
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Scope of IRM Responsibilities 


¢ Design a process for maximizing the value of |.T. and 
NSS acquisitions; 

¢ Design and implement process for assessing and 
management the risks of I.T. and NSS acquisitions; 

¢ Scope includes coordination with USD(AT&L), 
USD(C)/CFO, USD(I), CUCS; 

¢ Reduce data and information-collection burdens to the 
public and business; 
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Part 2 - Business Systems 


Business Management Modernization 
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Defense Business Systems Management 


¢ Guides implementation of DoD Manual 8020.1-M, 
<Functional Improvement Process>, August 1992; 


¢ Accountable for any business system that support 
information technology infrastructure and Information 
Assurance; 

¢ Acts as Certification Authority as member of the 
<Business Management Modernization Program> 
(BMMP) Investment Review Board; 

¢ Ensures consistency and interoperability between 

business systems and C2 systems; 

Identifies opportunities presented by communications 

and information technologies. 


Prof. Strassmann, GMU Lecture, October 3, 2005 - REPRODUCED ONLY BY PERMISSION 


Part 3 - Network Policies 


Network Centric Policies and Concepts 
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Directive 8100.1: Global Information Grid (2002) 


¢ GIG shall support all DoD missions for I.T. and NSS, 
Joint Operations, Joint Task forces and Combined 
Commands. 

¢ GIG will fulfill requirements defined by JROCM 134- 
01, 8/2001. 

¢ GIG shall be interoperable according to a common 
C4ISR Architecture. 

¢ Plans, design, hardware, software and support will 
be reviewed for compliance. 

¢ GIG program investments shall be reviewed annually 
to verify synchronization of projects 
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Part 4 - Command and Control 


Command & Control 
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Command & Control (C2) Responsibilities 


Develop and integrate the overall C2 strategies, 
structure and policies for the DoD; 

Provide program oversight and guidance over C2 
programs; 

Identify the governance of C2 that meets the needs 
of the President; 

Facilitates C2 integration, including support for the 
White House Military Office; 

Oversees C2 research, experiments, metrics and 
analytic methods; 

Directs DoD Components to plan, program and 
budget programs that deliver Joint capabilities; 
Negotiate and conclude international agreements 
related to Coalition C3. 
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Part 5 - Communications 


Communications & Space 
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Specific Functions 


¢ Negotiate and conclude international agreements 
related to the sharing or exchange of DoD 
communications equipment, facilities, support, 
services or resources; 


¢ Oversees non-intelligence space matters, including 
space-based communications, satellite control, 
space-based systems and space launch issues; 


¢ Manage issues related to meteorology, 
oceanography and space weather programs to 
assure interoperability and integration with GIG. 
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Part 6 - Enterprise Integration 


Enterprise-wide Integration Strategies 
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Defense Strategies 


¢ Non-intelligence space strategies; 

¢ Architect for the Enterprise Environment; 
¢ Oversight of architecture implementation; 
¢ Assurance of interoperability; 

¢ Architecture integration with Intelligence; 


¢ Measure advantages from using Commercial-Off-the- 
Shelf software solutions; 


¢ Adopt Knowledge Management technologies; 
¢ Apply commercial I.T. solutions. 
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Directives on Data Management 


¢ Guides and oversees the implementation of: 


— DoD Manual 8320.1-M-1, Standard Data Element Development, 
Approval, and Maintenance Procedures, May 1992. 


— DoD Manual 8320.1-M, Data Administration Procedures, March 
1994. 


— DoD Directive 8320.2, Data Sharing in a Net-Centric Department 
of Defense, December 2, 2004. 


¢ Install capabilities that enable the discovery, access, 
posting, processing, retrieving and fusing data to 
“make sense of the data gathered.” 
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Part 7 - Information Assurance 


Information Assurance 
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Responsibilities for Information Assurance 


¢ To protect and defend information and information 
systems by ensuring their availability, integrity, 
authentication, confidentiality, and non-repudiation. 


¢ To provide for restoration of information systems by 
incorporating protection, detection, and reaction 
capabilities. 

¢ To protection of information against unauthorized 
disclosure, transfer, modification, or destruction, 
whether accidental or intentional 


2) 
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Information & Security Assurance 


Oversight over information security; 
¢ Includes integration of sensitive information; 
Integration with National Security Systems; 


¢ Compliance with DoD S-3600.1 on 
</nformation Operations>. 
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Part § - Spectrum 


Spectrum Management 
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Spectrum 


¢ Allocation of ground-based and space spectrum for 
non-intelligence uses; 


¢ Negotiate and conclude international agreements 
regarding the use of the DoD electromagnetic 
spectrum; 


¢ Manage policies and practices with regard to the 
uses of DoD communications resources; 


¢ Manage the spectrum according to Directive 4650.1, 
including environmental impacts nationally and 
internationally; 
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Part 9 - Operations 


Network Operations 
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Specific Responsibilities 


¢ Enterprise-wide oversight about the development, 
integration and implementation of the Global 
Information Grid (GIG); 


¢ Oversight, guidance, approaches and 
demonstrations for Information Assurance as related 
to GIG implementation and deployment; 

¢ Oversight of network-centric systems engineering for 
the GIG; 

¢ Validates the technical performance for key 
programs on the GIG 
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Part 10 - Geographic Standards 


Positioning, Navigation & Timing 
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Position, Navigation and Timing (PNT) 


¢ Includes airspace and military-air-traffic 
control; 

¢ Oversight of GPS and GPS-related systems, 
capabilities and operations; 

¢ Oversees contingency policies of the Federal 
Aviation Administration and transfer to DoD 
under emergency conditions; 
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Part I] - Contingency & Migration 


Contingency & Migration 
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A Partial Diagram a Current DoD System 
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An Architectural Perspective 
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Legacy Architectures Do Not Scale 


Interoperability: 
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Contingency Responsibilities 


¢ Oversees contingency and crisis response 
communications for stabilization and 
reconstruction, including inter-agency issues; 


¢ Special emphasis to be placed on migration 
technologies uniquely suited to contingency 
operations; 
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Part 12 - Records 


Records Management 
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Broadened Interpretation of the Records Management Act 


¢ Compliance with E-Gov Act of 2002; 


¢ Compliance with Electronic Records 
Standards; 

¢ Compliance with Records Management 
Program (DoD 5015.2); 

¢ Compliance with Title 36 of <National 
Archives and Records Administration> Public 
Law 107-347. 
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Summary of Responsibilities 


Information Resources Management; 
Business Management Modernization; 
Network-Centric Policies; 

Command & Control; 
Communications and Space; 
Enterprise-wide Strategies; 
Information Assurance; 

Spectrum management; 

9. Network operations; 

10. Positioning, Navigation & Timing; 
11. Contingency and Migration; 

12. Records Management. 


oe eS YS 


Prof. Strassmann, GMU Lecture, October 3, 2005 - REPRODUCED ONLY BY PERMISSION 


42 


Summary 


¢ The DoD CIO has the responsibility for 
delivering the capabilities that will support the 
doctrine of “Information Superiority’. 

¢ DoD Directive 5144.1 sets the criteria for 
evaluating the performance of any CIO, 
including commercial firms that need to 
acquire “Competitive Superiority through I.T.” 

¢ This presentation establishes a benchmark 
for judging the adequacy of a CIO's position. 


43 


A New View of the DoD CIO Roles 


Business 


Productivity Plan 


information 
Management 
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Follow up 


* GMU students and faculty may continue a dialogue with prof. Strassmann 
on http:/www.strassmann.com/blog/dialog/ 


Paul Strassmann receives comments about his writings and lectures 
that can be found on www.strassmann.com. Some of these exchanges 
may be of interest to readers. Selected "dialogs" are published here 
without attribution to protect the privacy of individual commentators. 
To start a Dialog please e-mail your observations to 
paul@strassmann.com. 
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